RE: [saml-dev] is <NameID> required?

> In the SAML V2.0 browser profile, at least one assertion MUST contain
> a <Subject> element, but the spec doesn't go so far as to say that
> this <Subject> element MUST contain a <NameID> element?  Is this
> correct?

Yes, that's correct, but doing so precludes using certain other protocols
like SingleLogout.

-- Scott